Follow the Step-by-Step Guide for Confluence Single Sign On (SSO) using Azure AD as IdP

STEP 1: Configuring Azure AD as IdP

• Navigate to Azure AD portal http://portal.azure.com Proceed to Azure Active Directory and click on App Registrations.
• Click on New Application Registration and then select Application you’re developing.



• Assign a Name and Sign-on URL to application. Sign-on URL will be ACS URL provided in Identity Provider tab of the plugin.



• You’ll see the app on App Registration window. Click on it. Then select Settings option.



• Click on Properties Tab. Here change APP ID URI to SP-Enity ID provided in Identity Provider tab of the plugin and save.

STEP 2: Configure App

• Click on Azure Active Directory Tab display on the leftside of Dashboard.
• Click on Endpoints on App Registration window and copy Federation Metadata Document endpoint.



• You can also save the metadata document by going to this endpoint.

STEP 3: Configure Confluence as SP

• In miniOrange SAML plugin, go to Configure SP Tab. There are four ways to configure the plugin:

• Using Azure AD Domain Name :
  • Click on the Import from Metadata in Configure SP Tab.
  • Select IdP: Azure AD.
  • Enter Azure Ad Domain name:
• By Uploading Azure AD Metadata :
  • Click on the Import from Metadata in Configure SP Tab.
  • Upload Azure AD Metadata.xml file and click on Import.
• By Azure AD Metadata URL :
  • Click on the Import from Metadata in Configure SP Tab.
  • Select IdP: Import from Metadata URL.
  • Enter IDP Metadata URL: Enter the Federation Metadata Document URL.
  • Click on Import.
• Manual Configuration :
  
  • Go to Configure SP Tab in miniOrange SAML Plugin and enter the following details:
    
    

    IDP Entity ID	http://<your_okta_domain>/Azure AD/services/trust
    Single Sign On URL	https://<your_okta_domain>/Azure AD/ls
    Single Logout URL	https://<your_okta_domain>/Azure AD/ls
    X.509 Certificate	Paste the certificate value you copied from the Azure AD Metadata file.

• In miniOrange SAML plugin, go to User Profile tab. Enter the following values:
  
  

  Username	Name of the username attribute from IDP (Keep Username as NameID by default)
  Email	Name of the email attribute from IDP (Keep Email as NameID by default)
  FirstName	Name of the firstname attribute from IDP
  LastName	Name of the lastname attribute from IDP

  
  
  
• Go to User Groups tab. Enter the following values:
  
  

  Group Attribute

  Name of the Group attribute from IDP

• You can check the Test Configuration Results to get a better idea of which values to map here.
• Under the Group Attribute Section, configure which GROUP value coming in the SAML response needs to be mapped to which role. The Group value coming in the SAML response will be mapped to the Group assigned here and the user will be assigned that role.




• Go to SSO Settings tab. Enable Auto-redirect to IDP and Disable Confluence login option. Copy the URLs for backup.

For further details refer :
" https://docs.microsoft.com/en-us/azure/active-directory/active-directory-whatis